Enforcement · Italian Data Protection Authority (Garante) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Website operator: Non-compliance with general data processing principles

The Italian DPA has imposed a fine of EUR 60,000 on a website operator.

€60,000 Fine
Website operator
ITALY
Art. 5 GDPR Art. 6 GDPR Art. 12 GDPR Art. 13 GDPR Art. 15 GDPR Art. 16 GDPR Art. 17 GDPR Art. 24 GDPR Art. 25 GDPR
Personal Data Controllers Supervisory Authorities Processing Human Resources
May 17, 2023 Source gpdp.it

Full text

The Italian DPA has imposed a fine of EUR 60,000 on a website operator. The controller had published unauthorized personal data on the website www.trovanumeri.com, which it had collected through web scraping practices. The DPA also found that data subjects were not able to request the deletion of the data. In addition, the controller did not provide any contact information.

Industry: Not assigned

How it connects

References

All 12

Related across sources

C-422/24 Case C-422/24 - AB Storstockholms Lokaltrafik. A new page has been created with the following information: "" CJEU Jan 7, 2026 Personal Data Fairness & Transparency Controllers
CJEU Bavarian Lager: Disclosing personal data in access-to-documents requests is Processing: Communication of personal data in response to a request for access to documents constitutes processing. (¶69) Jun 29, 2010 Personal Data Legitimate Interest Right to Restriction
Guidelines 8/2022 identifying a controller or processor's lead supervisory authority Guidelines for identifying a controller or processor’s lead supervisory authority Guidelines ·EDPB Apr 17, 2023 Supervision Controllers Supervisory Authorities
10 A 5144/23 VG Hannover: Controller appeals DPA reprimand over unlawful workplace video surveillance The owner of a doner kebab production facility (the controller) had installed video cameras to monitor virtually every room of the business premises. Cameras were placed in the… Administrative Court Hannover Aug 7, 2026 Controllers Supervisory Authorities Legitimate Interest
Opinion 12/2025 ASML Group Adopted on — controller BCRs EDPB, Opinion 12/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ASML Group Adopted on, 2025. Dutch SA ·Opinion ·EDPB Jun 6, 2025 International Transfer Codes of Conduct Controllers
Opinion 3/2026 FrieslandCampina Group — controller BCRs Dutch SA ·Opinion ·EDPB Feb 5, 2026 International Transfer Codes of Conduct Controllers
Related documents